privacy notice

no cookies. no trackers. here's what does happen.

what we count

page views, clicks on the main button and on the social links, and completed redirects. that's it. we don't set cookies, don't use third-party analytics scripts and don't fingerprint your browser.

network data, briefly

when your browser loads the page, the server sees your IP address and browser user-agent — that's how the web works. we use them for a few milliseconds to compute a daily pseudonymous id: a keyed hash (HMAC) of the date, a shortened form of your IP (the /24 network for IPv4, /48 for IPv6) and a coarse device class (mobile/desktop + OS family). the raw IP and user-agent are discarded and are never written to the database or logs.

the key rotates with the date, so the id from today cannot be matched to the id from tomorrow. this is a pseudonymous identifier, not "fully anonymous": within one day it lets us tell two visits from the same network and device class apart, and nothing more. it is never linked to any account, purchase or subscription.

what's stored

aggregated counts per day, per traffic source (e.g. "instagram"), per campaign tag, per coarse device class and — when the hosting provider supplies it — per country. no names, no emails, no precise locations.

do not track

if your browser sends DNT: 1 or the Global Privacy Control signal, nothing about your visit is recorded at all.

retention

event-level rows are deleted automatically after the configured retention period (default 365 days; the owner can shorten it in the dashboard). one-time redirect links expire within minutes and are deleted on use.

the "open in browser" step

instagram, tiktok and similar apps open links in a limited built-in browser that often breaks logins and payments. when we detect one, we offer to open this page in your real browser. everyone is offered the same page and the same destination; nothing is hidden or swapped.

if you request to join the telegram channel, the bot sees the public profile data telegram sends with a join request. it keeps a keyed hash of your user id (not the id itself, once the request is decided) for a short retention period to prevent repeated spam requests, and nothing else.

contact

questions about this notice: message the account on instagram or telegram linked from the front page.